CVE-2000-1063: Undefined Security Weakness

Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service...

CVE-2000-1064: Undefined Security Weakness

Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service...

CyberPatrol - poor credit card protection

CyberPatrol - poor credit card protection SUMMARY Product: Cyber Patrol vunerable versions: 4.04.003 & 4.04.005 possibly all other versions non-vunerable versions: unknown Vendor: Microsys formerly owned by Mattel, now JSB Vendor Contacted: Fri, 18 Aug 2000 11:52:20 -0500 CDT Fixes: None availabl...

Microsys CyberPatrol 4.0 4.0034.0 4.005 - Insecure Registration

Microsys CyberPatrol 4.0 4.0034.0 4.005 - Insecure Registration source: https://www.securityfocus.com/bid/1977/info CyberPatrol is popular web access restriction software by Microsys. A vulnerability exists in the way CyberPatrol submits registration information from its client software to...

Microsys CyberPatrol 4.0 4.003/4.0 4.005 - Insecure Registration

source: https://www.securityfocus.com/bid/1977/info CyberPatrol is popular web access restriction software by Microsys. A vulnerability exists in the way CyberPatrol submits registration information from its client software to Microsys' backend cybercentral.microsys.com that could allow a remote...

CVE-2000-0874

Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...

CVE-2000-0700

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...

CVE-2000-0700

Cisco Gigabit Switch Routers (GSR) running IOS with Gigabit/Fast Ethernet cards are affected by a line-card failure defect (CVE-2000-0700, CSCdp35794) that can cause packets to bypass ACLs or be forwarded incorrectly, potentially disrupting enforcement and traffic flow. Affected versions include ...

CVE-2000-0700

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...

CVE-2000-0700: Undefined Security Weakness

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...

DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2

All, We have not released this for the past week at the vendors request. This was to enable them to notify all registered users about this vulnerability and to provide a work around. We have taken the unusual step of including the vendors response to our original advisory release in full. This wa...

DST2K0035.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure

SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user ...

SmartWin CyberOffice Shopping Cart 2.0 - Client Information Disclosure

source: https://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user to gain read access to the private directory on a website running...

Extent RBS directory Transversal.

Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...

Cart32 Backdoor Password Arbitrary Command Execution

The Cart32 e-commerce shopping cart is installed. This software contains multiple security flaws. There is a backdoor password of 'wemilo' in cart32.exe. This backdoor allows a remote attacker to run arbitrary commands in the context of the web server, and access credit card information...

Alert: Cart32 secret password backdoor (CISADV000427)

Cerberus Information Security Advisory CISADV000427 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 27th April 2000 Name : Cart32 secret password backdoor Affected Systems : Any Win32 based web server using Cart32 versions 3.0 most uptodate and 2.6 are affected. Issue : Attackers ca...

09-16-99-ihtml.txt

Team Asylum Security Copyright c 1999 By CyberSpace 2000 http://www.team-asylum.com Source: Dave M. [email protected] Advisory Date: 09/16/1999 Affected -------- All known released versions of the iHTML Merchant for Unix/Windows 95/98/NT. Product Description ------------------- iHTML...

Webcart Default Install Configuration Disclosure

At least one of these file or directories is world readable : /webcart/orders/ /webcart/orders/import.txt /webcart/carts/ /webcart/config/ /webcart/config/clients.txt /webcart-lite/orders/import.txt /webcart-lite/config/clients.txt This misconfiguration may allow an attacker to gather the credit...

h-thief.txt

security vulnerability in hustler.com which allows any user to steal another users account and gain access to full access to their account including cc information no fix yet. hustler.com has been informed. ---------------------------------------------------------------------------- exploit...